The private keys of the DutchGrid medium-security Certification Authority are backed up on encrypted removable magnetic media, stored in a securely controlled environment.